Vulnerability Details CVE-2005-4069
SunnComm MediaMax DRM 5.0.21.0, as used by Sony BMG, assigns insecure Everyone/Full Control permissions to the "SunnComm Shared" directory, which allows local users to gain privileges by modifying programs installed in that directory, such as MMX.exe.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 28.9%
CVSS Severity
CVSS v2 Score 4.6
References
- http://secunia.com/advisories/17933
- http://securitytracker.com/id?1015327
- http://www.eff.org/IP/DRM/Sony-BMG/MediaMaxVulnerabilityReport.pdf
- http://www.eff.org/news/archives/2005_12.php#004234
- http://www.kb.cert.org/vuls/id/928689
- http://www.securityfocus.com/bid/15754
- http://www.vupen.com/english/advisories/2005/2783
- http://secunia.com/advisories/17933
- http://securitytracker.com/id?1015327
- http://www.eff.org/IP/DRM/Sony-BMG/MediaMaxVulnerabilityReport.pdf
- http://www.eff.org/news/archives/2005_12.php#004234
- http://www.kb.cert.org/vuls/id/928689
- http://www.securityfocus.com/bid/15754
- http://www.vupen.com/english/advisories/2005/2783
Products affected by CVE-2005-4069
-
cpe:2.3:a:sunncomm:mediamax_drm:5.0.21.0